Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa
File: 0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa (raw, json)
Hash identifier: le1LA4Xujr6GnYWSjF+Cue7sQNyxzksWzA1UcLu132k=
Subject key identifier: 26:C4:3E:5F:B4:8E:B4:8C:44:B7:6C:EA:D8:1A:20:C7:4C:BD:B2:21
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285848547032A60DCAA5D2BC1AD580
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 33392
IP address blocks: 208.103.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:32:a6:0d:ca:a5:d2:bc:1a:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=d6ecdbff-dd33-46b9-a1ef-2b96ad602bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:f0:ea:af:8b:1c:08:97:81:1f:7c:51:17:
6c:92:a8:83:5c:80:3d:b1:83:17:05:d7:4a:8b:7b:
49:f0:09:99:9f:55:c4:3c:98:76:8e:7f:86:5a:34:
45:55:e8:9f:50:68:5f:da:c5:a8:ff:68:09:f4:62:
16:7f:34:a8:4e:3f:20:27:bb:c1:b6:50:9b:a3:6b:
53:8f:6f:d5:52:c4:90:2f:99:fd:ef:2e:16:e8:7b:
47:50:1f:9e:dd:3c:c6:cd:84:04:f8:b2:ae:9f:b8:
74:e3:94:30:8a:9f:20:83:0e:67:d3:fe:6f:0f:0d:
17:e7:72:cf:61:2a:36:76:3e:2d:a0:dc:4f:d8:a5:
95:fc:ea:e3:32:c9:0f:62:73:4e:95:fc:33:48:bb:
d5:28:e9:af:ab:2e:e0:d0:36:8d:7c:80:8e:1e:7d:
41:98:09:02:d9:15:1c:88:41:be:5b:56:cd:58:4f:
c4:7f:ea:37:d0:dc:02:bb:70:ef:bf:8f:c8:5c:2f:
bd:b8:2d:8f:e6:72:2c:bc:3b:6a:66:33:3c:06:3b:
ba:44:90:4e:6e:bf:2b:ac:15:7b:fa:7f:2b:b0:69:
48:10:a5:4c:7b:42:41:30:b1:11:33:fe:87:d3:7b:
a2:15:66:5e:a5:45:90:88:da:57:99:70:f2:94:a4:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:3E:5F:B4:8E:B4:8C:44:B7:6C:EA:D8:1A:20:C7:4C:BD:B2:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:88:aa:a6:a0:80:74:a0:2e:1e:6f:16:82:c9:87:56:a4:cb:
8a:28:c2:40:b1:60:7c:a6:5d:96:54:87:63:4c:2b:50:6c:1b:
f5:b4:d3:1f:51:53:d6:b9:dc:e8:76:7a:da:21:63:16:dd:04:
a5:3d:d1:f0:1e:02:6d:69:de:eb:c1:18:b1:bb:d3:d0:90:cc:
ec:d3:69:2f:6a:98:1c:35:76:70:ab:40:0d:3c:48:05:17:f8:
98:b1:76:70:b5:b9:3e:fd:91:29:27:4c:88:19:ae:26:9c:9c:
0d:30:24:14:5d:c4:38:d3:17:62:c2:c5:ee:4b:b5:0a:91:41:
b9:12:84:52:41:23:b6:9c:6d:c5:b8:6a:e6:8e:8b:f1:77:c7:
71:9c:6f:48:34:7d:27:f5:db:28:ea:3e:3c:5a:b0:d8:e4:ce:
a5:73:55:ee:ee:32:a7:e0:bc:8e:fd:69:3e:00:a0:d0:7e:08:
27:d8:d9:f8:d7:17:57:3d:19:d3:c6:d2:70:4b:fc:9b:87:60:
35:5f:80:3c:17:aa:7a:16:29:1e:c4:d6:1c:98:fa:15:f3:13:
41:23:21:ca:b6:68:c4:e0:f6:1f:ad:20:50:2c:be:98:7e:1e:
ff:2d:96:48:6b:81:13:8d:ed:b0:76:96:2c:bb:24:b7:a9:28:
44:4e:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:04 2025 by rpki-client